Security audit
Security checks for vulnerabilities and agentic risk
This MacBook optimization skill is locally focused and purpose-aligned, but users should review any cleanup or process changes before approving them.
Install only if you want an agent to inspect local Mac performance and storage. Treat cleanup, duplicate removal, process termination, startup changes, and cron-based monitoring as actions that should show a preview and wait for your explicit approval.
The README advertises 'Cleanup Tools' that find large files and suggest cleanup, but provides no warning that cleanup actions may affect user data or system stability if acted on carelessly. In an agent skill context, users may reasonably infer the skill can recommend or initiate deletion-related actions, so missing safety guidance increases the risk of accidental destructive behavior.
The usage example 'Clean up disk space' encourages a potentially destructive operation without warning that cleanup may be irreversible or remove important files. Because this is a Mac system-management skill, the context makes the omission more dangerous: users may trust the agent to make file-management decisions on their behalf.
The usage examples are broad, natural-language requests like 'fix any issues' and 'show me everything,' which can cause the skill to match common Mac support requests without clear user intent to invoke this specific skill. Because the skill includes automation such as cleanup, process management, GUI opening, and possible continuous monitoring, ambiguous activation increases the chance of unintended execution of impactful actions.
The phrase 'Show me my disk usage visually and clean up automatically' couples a common diagnostic request with automatic remediation, making it easy for an ordinary user request to trigger file-deleting or system-changing behavior. In this skill's context, that is more dangerous because the document explicitly advertises automated cleanup of caches, logs, temp files, downloads, and duplicates, so ambiguous activation could lead to unintended data loss or disruptive changes.
No suspicious patterns detected.
